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Two Reconfigurable Flight-Control Design Methods: 
Robust Servomechanism and Control Allocation 
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Two methods are discussed for design of reconfigurable flight-control systems when one or more control surfaces 
are jammed. The first is a robust servomechanism control approach, which is a generalization of the classical 
proportional-plus-integral control to multi-input/muiti-output systems. The second proposed method is a control- 
allocation approach based on a quadratic programming formulation. The formulation is formally analyzed, and 
a globally convergent fixed-point iteration algorithm is used to make onboard implementation of this method 
feasible. The two methods are applied to reconfigurable entry flight control design for the X-33 vehicle. Nonlinear 
six-degree-of-freedom simulations demonstrate simultaneous tracking of angle-of-attack and roll-angle commands 
during control surface failures. The control-allocation method appears to offer more uniform and good performance 
at the expense of modestly higher computation requirement. 


I. Introduction 

F LIGHT-CONTROL system reconfiguration is concerned with 
making changes in flight-control system to adapt to failures 
and damages. The adaptation is usually in the forms of control sys- 
tem gain changes or control law r changes. Reconfigurable control 
offers the potential of significant enhancement of flight safety and 
mission success rate. The reconfigurable controller has the poten- 
tial of landing a crippled airplane safely and thus increasing mis- 
sion success rates. Because of its clear benefits in both military 
and civil applications, flight-control reconfiguration research has 
received considerable attention in recent years, exemplified by the 
U.S. Air Force Reconfigurable Control for Tailless Fighter Aircraft 
program 1 and the NASA X-33 program. 2 The references contained 
in Ref. I provide a glimpse of some previous studies on this subject. 
An often investigated approach for reconfigurable control system 
design is through some form of model-following technique, typi- 
cally by means of either parameter adaptation 1 or neural networks. 1 
More recently, reconfigurable control designs using dynamic inver- 
sion and neural network to adaptively cancel inversion errors have 
demonstrated good performance. 4 

A major task in control reconfiguration deals with adjusting the 
controller gains on-line or switching to a different control law to 
compensate for the failure. This paper focuses on this aspect. More 
specifically, the failure is assumed to be a jammed aerodynamic 
effector, which is among class 1 failures as defined in Ref. I. It will 
be further assumed, when necessary; that the aircraft is fitted with 
smart actuators so that the jammed control surfaces can be detected 
and the position identified. This condition is already readily met by 
actuators available today. 2 

The objective of this work is to seek reconfigurable control sys- 
tem designs that are easily implementable in flight software, reliable, 
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and offer a degree of assurance of success for the targeted types of 
failures. The reconfigured control system is expected to restabilize 
the aircraft should control surface jamming occur and provide rea- 
sonable command-tracking performance. 

To these ends, two approaches are investigated and evaluated in 
this paper. One is based on the robust servomechanism design, 5 6 
which is a generalization of the classical proportional-plus-integral 
(PI) design. In this approach the effect of the jammed surface is 
treated as a disturbance to the system. A PI controller is designed 
to stabilize the aircraft (stabilization), balance the jammed surface 
(disturbance rejection), and provide command tracking. The second 
method is developed by the authors of this paper, which is based 
on a control-allocation approach. Here a reference baseline control 
law is first designed for the healthy aircraft with all of the con- 
trol surface operable. At any given state the desired control inputs 
(e.g., moments and forces) to the aircraft can be computed from this 
baseline control law. In the event of a jammed surface, the redundant 
degree of freedom of the control effectors is utilized to distribute the 
deflections of the operable surfaces in an optimal fashion so as to 
cancel the influence of the jammed surface and reproduce as closely 
as possible the desired inputs the reference controller would have 
produced to the aircraft. 

As a demonstration, the two approaches are applied to a reconfig- 
urable entry flight-control system design for the X-33 vehicle. The 
X-33 vehicle is a one-half-scale suborbital prototype single-stage- 
to-orbit reusable launch vehicle. In flight tests the X-33 vehicle will 
accelerate to approximately Mach 9 and climb to an altitude of ap- 
proximately 200,000 ft. The entry flight immediately follows a short 
transition phase after the ascent. Figure 1 shows the configuration 
of the X-33. The X-33 has four sets of control surfaces: rudders, 
body flaps, inboard and outboard elevons, with left and right side 
for each set. Each of the eight surfaces can be independently actu- 
ated with one actuator for each surface. All of the aerosurfaces will 
use electromechanical actuators (EM As). The body flaps also have 
an pneumatic load assist device that can be used for a total of 40 s 
during ascent or entry. 

Analysis has shown that although the probability for an actuator 
failure is very low, when it does happen, the failure would most likely 
result in jam of the associated aerosurface. 2 The EMAs are capable 
of failure detection and identification within 120-160 ms. This ca- 
pability provides information on which surface, if any, is jammed, 
and jammed at what position. The reconfigurable control design is 
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Vertical rudders 

• Rudders: 60° outboard and 

30° inboard deflection 

• Electromechanical actuators 

• Function: yaw control and 



Elevons 

• Elevons: ±25’ Inboard and 

±30° outboard 

• Electromechanical actuators 

• Function: pitch control and 

roH control at all speeds 


Body flaps 

• Electromechanical actuators 

• Pneumatic load assist device 

• Flaps: -15* to 26° 

• Function: pitch control at all 

speeds, yaw control and entry 


Fig. I X-33 advanced technology demonstrator. 


done for each surface failure. The eight control surfaces have control 
power capable of providing redundant pitch, roll, and yaw restoring 
moments such that if one surface fails, the potential exists for an 
alternate control scheme to maintain control of the vehicle. 

The control system reconfiguration problem for the X-33 is posed 
as follows: If a single control surface fails (jams, floats, or runs 
away), can the nominal or reconfigurable controller be used to land 
the vehicle safely? A nominal controller has some inherent robust- 
ness and may be able to handle a limited failure set (such as a left 
rudder jammed at 3 deg). An appropriately designed reconfigurable 
controller should have a much larger region of sumvable failure 
conditions. The two proposed reconfigurable control designs ap- 
pear to meet this challenge well. 

The methodology for the robust servomechanism design is re- 
viewed in Sec. II. In Sec. Ill, the control-allocation method is in- 
troduced as a quadratic programming (QP) problem; two analytical 
yet practically useful properties of this formulation are established; 
and a globally convergent fixed-point iteration algorithm suitable 
for onboard implementation is described. Section IV contains the 
application of the two methods to reconfigurable entry flight control 
of the X-33 vehicle and the evaluation of the performance. Conclu- 
sions are given in Sec. V. 


r'*' + -" + ••■ + a H _ ,r + = 0 (3) 

m'** +QT|«.' ,? -" H + a<,«> = 0 (4) 

with <y> I. The preceding formulation encompasses many com- 
monly used signals, including constants (when q = 1 and orj =0), 
polynomials (when a, = 0, / = 1 , . . . q ), sinusoidal functions (w'hen 
q = 2, cf\ =0, and a : > 0) and exponential functions. The initial 
conditions for it are assumed to be arbitrary; therefore, ir(f) is con- 
sidered unknown (unmeasurable). In a more general formulation the 
dynamics of r (r) and w(r) do not have to be the same. 6 But they are 
assumed to be the same here for simplicity, and such an assumption 
is adequate for our specific purpose in this paper. The objectives 
of the control design are to find a feedback controller such that 
1) the closed-loop system is stable; 2) the error e(t) = /*(/) — y(t) 
approaches zero in the presence of the unmeasurable (possibly time- 
varying) disturbance tr(/); and 3) the closed-loop system is robust 
in the sense that asymptotic tracking of r and rejection of w are 
maintained in the presence of system parametric uncertainty or even 
variations in the order of the dynamics, as long as the closed-loop 
system remains stable. 
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II. Servomechanism Problem 
for Multi-Input/Multi-Output Systems 

The servomechanism problem is concerned with control of a 
dynamic system to achieve asymptotic tracking of desired output 
and rejection of unmeasurable disturbance. For single-input/single- 
output (SISOj systems the problem has been well understood for 50 
years. However, it is only in the last two decades that this problem 
has been solved for multi-input/multi-output (MIMO) systems. In 
the follow ing a simpler version of the problem is introduced, and 
the controller design methodology is reviewed. For more complete 
discussion and detail the reader is referred to Refs. 5 and 6. 

A. Problem Formulation 

Consider a linear, time-invariant, MIMO system: 


B. Robust Servomechanism Design Methodology 

A dynamic controller is to be designed to meet the objectives just 
stated. The controller dynamics are set to be 

v, = A t .\> + B c {r ~ y) (5) 


where .\\ e R nq is the controller slate and A c e R p< * x w = block diag 
fT r] with 


0 

0 


r = 


0 0 

- 1 


0 ' 

0 

0 I 

—a: — ofj 


€ R qxq 


( 6 ) 


v = A.x + Bit + Eir 
v = C.v + Du + Fw 


0) 

( 2 ) 


and 6, € R r<! x n = block diag [y y\ with 

m 


fl 


where .v € R" is the plant state,// e R m the plant input, ir € R 1 the dis- 
turbance, and y e R p the controlled output with p <m . Let r e R p 
represent the desired history for y. Assume further that r and m* are 
modeled by 
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Consider (he open-loop system including the plant fEq. ( 1 )| and the 
controller dynamics [Eq. (5)1 with r = Q 
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Let a k (/ be the roots of the polynomial 

A f -b a | T ■ ■ -F Qfy _ j A + ct (i = 0 


Suppose that the following condition is satisfied: 


rank 



B 

D 


= « + /*, 


' = i q 


(9) 


then the augmented system (8) is controllable. 5,6 Hence there exist 
control laws 


u = kx -f- k c x c (10) 

such that the closed-loop system is stable. Furthermore, when r ^ 0 
and satisfies Eq. (3), asymptotic tracking and disturbance rejection 
are achieved by such a control law. That is, e — r — y — > 0 for any 
initial condition a (0) and any w satisfying Eq. (4). The closed-loop 
system possesses robustness in the sense that for any (not necessarily 
small) perturbations in (M, B, C, D, Z? c , k, £ t .}, asymptotic tracking 
and disturbance rejection still hold as long as the closed-loop system 
remains stable and remains block diagonal. 5,6 

Remarks'. 

I ) Because the augmented system (8) is controllable, the control 
law (10) can be conveniently found by applying the linear quadratic 
regulator (LQR) approach to Eq. (8). 

2) In the special case where r is constant commandand w is 
constant (but possibly unknown) disturbance, we have q — \ and 
Qfi =0; therefore, A c = 0, and B c =zfp Xp according to their def- 
initions. From the controller dynamics (5) it can be seen that 
l V= /(''->’) dr = j e d/. Thus the control law (10) is simply a PI 
control law, which is well known in classical SISO control theory. 
But the current formulation is much more general in that it applies 
to MIMO systems and allows tracking of time-varying commands 
and rejection of time-varying disturbances. 

3) The principle of this class of methods is also alternatively 
known as the internal model principle in the literature because the 
controller has to include the models of the disturbance and command 
in order to achieve disturbance rejection and command tracking. 

4) This robust servomechanism design applies conveniently to 
control of impaired aircraft with one or more jammed control sur- 
faces. Suppose that the dynamic model (I) represents the linearized 
dynamics of such an aircraft at a trim condition. Let w in Eq. (I) 
denote the (constant) position of the jammed surface and it all of the 
remaining operable surfaces. The exact value of w does not need to 
be known with this method. The matrix E (a column vector in this 
case) in Eq. (1) is then the stability derivative associated with the 
surface now jammed (i.e., the column corresponding to the jammed 
surface in the B matrix of the linearized model prior to failure). 
Now the problem is cast into the formulation in Sec. II.A anda PI 
controller ( 1 0) can be designed by LQR or pole-placement methods 
to stabilize the aircraft, reject the influence of the jammed surface, 
and track constant commands. 


III. Control Reconfiguration via Control Allocation 

Control allocation is concerned with how to distribute the deflec- 
tions of multiple control surfaces of the aircraft to generate required 
control inputs (pitch, roll, and yaw moments, and forces) when the 
number of the control surfaces is greater than the number of required 
control inputs. Reference 7 contains a list of recent work on control 
allocation and provides exploratory discussions to several control 
allocation approaches based on quadratic and linear programming. 
In this section we consider a control reconfiguration approach, also 
based on a control allocation scheme using the QP method. The idea 
is to use the redundancy of the operable control surfaces to cancel 
the effects of the jammed surface and still provide the same (or 
almost the same) desired control inputs. Clearly the greater the con- 
trol redundancy is, the better suited this approach would be. Also, 
this approach will require the position of the jammed surface to be 
known, either through the use of smart actuator or by estimation. 


A, Problem Formulation 

Let the linearized dynamics of the normal aircraft at a trim con- 
dition be given by 


x ~ Ax + Bu (II) 

It is assumed that a reference control law has been designed based on 
the model (11) that provides satisfactory stabilization and command- 
tracking performance for the aircraft. Suppose now that one of the 
control surfaces is suddenly jammed at a position ir. Rewrite the 
postfailure state equation of the system ( 1 1) as 

i = Ax + Brit r + d x (12) 

where u r e R m represents the remaining control surfaces, B r the 
postfailure control influence matrix. d x =b w w is the input to the 
aircraft caused by the jammed surface w , where b w is the column in 
B corresponding to the jammed surface. Note that d x is known when 
w is known. Let z=C : x be a selected /-dimensional controlled 
output vector (:€#') to be used in defining the control allocation. 
From Eq. (12) and the definition of r we have 

z = C z Ax -F C : B r u r + C_d y = A : x T B : u r -f d . (13) 

The choice of r is not necessarily the same as y in Sec. II, but must 
be one such that the closed-loop stability and performance can be 
ensured from control of z. From a control theoretical viewpoint the 
closed-loop stability requirement implies that the choice of the con- 
trolled output r should lead to a nonminimum-pha.se system. One 
most natural choice of z is z = (p r q) T (the roll, yaw, and pitch 
rates). Other choices are also possible. We require in general that 
m >i \n this approach (i.e, the number of operable control surfaces is 
greater than that of the controlled variables). At the current state x ( t ) 
suppose that the reference baseline feedback control law for the 
healthy aircraft would have produced input it* e R m ^ ] if all of the 
control surfaces were operable. Then the desired rate of : would be 

z* = C : Ax + C z Bu' (14) 

We seek a u r that makes the right-hand side of Eq. (13) as close as 
possible to that of Eq. (14), or B z it r + d : ^ C z Bu *. Thus the actual 
c * * consequently, z remains close to z* , which represents desired 
performance. Such a it r can be determined by minimization of the 
following quadratic function: 

min/ = ±[(I - e)(B : u r +d z - C : Bu*) T Q,(B.u r + d- 

Ur 

-C;B«*) + eujQ 2 u r ] (15) 

for some small 0 < e < 1 and subject to 

Mr min < My 5 w r max (16) 

where Q t and Q 2 are positive definite matrices of appropriate di- 
mensions. The u r mm and u rtt ux in Eq. (16) are the lower and upper 
bounds of the remaining control surfaces. 

The minimization of J subject to Eq. (16) constitutes a QP 
problem. The term eujQ 2 it r in Eq. (15) is a regularization 
term to^the QP problem. Without it (e = 0), the Hessian of J , 
d 2 J/du; = Bl Q X B : e R m xm , is not strictly positive definite be- 
cause the rank of Bl Q \ B z € R m xm is at most / but m > /. In this 
case the QP problem has no unique solution, and chattering in u r 
can easily occur. On the other hand, any 0 < e < 1 will make the 
Hessian of J positive definite, and the solution to the QP prob- 
lem is unique. But clearly e should be sufficiently small in order 
for B z it r -j -d : - C : Bu * %0. When B z u r + d z -C z Bu* %0, the re- 
sponse of the aircraft would be very close to that of the healthy 
aircraft, despite the jamming of a control surface. 

B. Analysis 

To formalize the preceding heuristic arguments about the ratio- 
nale of the formulation for control allocation, let us define for (riven 
B z , d z , and C : Bu* the set 

U = {«, € R”\B : » r + d : - C : Bu' = 0. u rmin < „ r < ,, | 


( 17 ) 
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Denote (he solution to the QP problem (1 5) and (16) by fora 
given 0 < e < I . We first make the following statement; 

Property l 

[f U is not empty, the solution u* of the QP problem (15 ) and (16) 
has the asymptotic property of 

lim [B : ii’(s)+d : -C : Bu'] =0 (18) 

When f = 0, any u, in U can be taken to be u* r , and 70/*) = 0 is 
the minimum. For e ^ 0 this claim can be proved by contradiction. 
Let 8 f = B z u*(e) 4- d - C : Bu * for a given f. Suppose that S e •/+ 0 
as s * 0. Take an arbitrary u r eU. That is, B : u, + d z - C-_ Bu * = 0, 
and J(u r ) — eu T r Qiu r /2 . Then for sufficiently small e > 0, the fol- 
lowing will be true: 

J [«»] = j[(l - s)SjQ^ c + eu? (e)Q 2 u' r (e)] 

> leiilQiiir = J(iir) (19) 

because 8j Q\8 e 0. But the result that J[u*(e)] > J(u r ) contra- 
dicts the assumption that u* is the solution of the QP problem. 
Therefore = B u * + d z — C : Bu* must approach zero as e -+ 0. 
In fact, from the requirement that J (u*) < 7 (fi r ), including the case 
of sufficiently small s > 0, we can further conclude that 8 e must ap- 
proach zero faster than y/e as s -► 0 so that lim £ 0 [8j Q \ 8Je] -► 0. 

This property formally establishes that we can achieve B z u r + 
d : —C z Bu*zz 0 within any practically reasonable accuracy by solv- 
ing the QP problem with a sufficiently small e > 0, whenever 
B_u, — C z Bu * =0has solutions within the bounds [Eq, (16)]. 

Our second claim applies to a more specific case. If rank ( B : ) = i 
(full rank), the equation B : u r + d z — C_- Bu* = 0 has infinitely many 
solutions u, . But it is well knowm that the solution defined by the 
Moore-Penrose pseudoinverse 

„ = b t : (. B z Bry\c : B,t' - d : ) <20) 

is the unique one that has the minimum 2-norm || • || : among all such 
it r . We state that the solution of the preceding QP problem can be 
made as close to //* in as desired. 

Property ■ 2 

If the matrix B : is of full rank and it* mm defined in Eq. (20) satisfies 
the constraint (16). then for Qz — l and sufficiently small e > 0 the 
QP problem (15) and (16) has the solution of 

(2i> 

where //^ in is given in Eq. (20), r} £ e R m and r) e — ► 0 as e -*■ 0. 

This property can be shown to be true as follows: The assumption 
that //V R satisfies Eq. (16) immediately leads to the conclusion of 
//^ m eU\ thus, the set U is nonempty. By property 1 the solution of 
the QP problem with small e can be expressed as //*(£*) =u r -j- rj £ 
for some u r € U and rj f e R m with r\ f — ► 0 as e — ► 0. When Q\ — / , 
the optimal objective function from Eq. (15) becomes 

J (u‘ r ) = {[( \ - e)8j QA + eu; T u- r ] 

= ;f[(l ~0(&lQA)/c + ll«rll 2 + 2rjJu r + HqJ 2 ] 

(22) 

where is the same as defined in the discussion of prop- 
erty 1. From the observation in the discussion of property 1 
that lim, ^ 0 (^ r Qi&e/e) — 9 ► 0, clearly for a sufficiently small (but 
nonzero) £, the dominant term in /(«*) is ||/7 r || : because all of the 
other terms in the brackets approach zero as f 0. For J(u* r ) to 
be minimum, fi,. must be the one in U with the minttnum 2-norm. 
Hence /7,. = «V n , w here u* mtn is given in Eq. (20). 

Property 2 reveals that the QP formulation with Q : = / and a 
small f > 0 will produce a solution that is practically the same as 
the commonly employed pseudoinverse solution in control alloca- 
tion, if such a solution satisfies the constraints (16). But allowing 
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different choices of Q z in the QP formulation conveniently provides 
flexibility to assign preference to small deflections of certain con- 
trol surfaces, which is not easy to do if the control allocation is only 
based on enforcing B z u, + d : -C-Bu* = 0. 

The preceding discussion confirms formally that the QP formula- 
tion with a small f in Eq. (15) preserves the objective of redistribut- 
ing //,. to achieve B_u r +d : -C z Bu* ^0 whenever it is possible 
to do within the bounds [Eq. (16)]. When direct control allocation 
based on solving B z it, +d : — C z Bu* =0 subject to Eq. (16) is not 
possible (i.e., the set U is empty), the solution of the QP problem 
still provides a best possible u r . 

C. Fixed-Point Iteration Algorithm 

A reliable, efficient, and simple algorithm is the key for this 
control-allocation approach to be practically useful. When none 
of the constraints in Eq. (16) are active, solving the QP problem 
is straightforward, and the solution u r is obtained from the unique 
solution of the linearalgebraic system 3J/du r =0, which gives 

«; =(\-s)[(\-e)BjQ l B : +eQ i y l B!Q l (C:Bir-d : ) (23) 

In more general cases where some of the constraints in Eq. (16) 
are active, the standard QP algorithms 8 are more involved and not 
suited for onboard implementation and applications. But for the spe- 
cial class of QP problems such as in Eqs. ( 1 5) and ( 1 6) where there 
are only inequality constraints of the simple form [Eq. (16)], an ex- 
tremely simple, globally convergent fixed-point iteration algorithm 
can be devised for onboard use. This method is described and used 
in Ref. 9 in a different context. Here we shall apply this method to 
the QP problem ( 1 5) and ( 1 6). 

Define a vector saturator $[■] = (s \ [•] • • • s m [*]) r : R m R m by 
!j>Uj 

Sjl(] = 1 fy, Lj<Sj<Uj , y=l,2 )R (24) 

. ^ j » Zj S Lj 

for any £ = (£i • • ■ f m ) r e R m , w here for the moment Uj =u n ^ Xj and 
^ j = Wniin, , equal to the upper and lower bound or the j th component 
of u r , respectively. Let H = (1 - e)BJ Q\ B z -f e Q z . Calculate the 
spalar 

(25) 

where h tJ are the elements of H . Then the solution to the QP problem 
(15) and (16) satisfies the following fixed-point equation: 

u r =j[(l -£)a>B T z Q x (C.Bu' -d : ) 

- {toH - / mx J« r ] = f(u r ) (26) 

Furthermore, the fixed-point iteration 

I /^ = /[«;* - n ], k = 1,2,..., V M < 0> €/? m (27) 

converges to the unique solution of the QP problem from any initial 
guess u { r 0) . 

The validity of this fixed-point algorithmis established by exam- 
ining the necessary and sufficient conditions for the QP problem 
and using global contraction mapping theory. 9 The unconstrained 
solution (23) is just a special case of Eq. (26) when none of the 
components of the saturators in Eq. (26) are active. In such a case 
s[£] = C; therefore, Eq. (26) simply reduces to Eq. (23). But it should 
be stressed that in general, the QP problem solution by Eq. (26) is 
different from what is obtained by clipping off (saturating) the right- 
hand side of Eq. (23). 

The fixed-point iteration algorithm (27) is particularly suited for 
onboard implementation. If the initial guess is chosen to be the 
solution of the QP problem in the preceding control update cycle, the 
current u F should be obtained in just a few iterations from Eq. (27). 

A similar constrained optimization problem was formulated in 
Ref. 2 for redistributing control surfaces after the failure. Although 
simulations showed good performance, the computation require- 
ment using a standard optimization algorithm was deemed to be too 
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imcnsivc for onboard implementation. Another concern was about 
the convergence rate. These concerns appear to be satisfactorily ad- 
dressed by the current algorithm. 

Finally, this method can be easily modified to accommodate both 
control surface amplm.de and rate constraints. Suppose, in addition 
to the amplitude constraint ( 16) that the rate limit for the Jth surface 
IS u tm* r and the sampling time of the control system is Ar The 
em'y modifications will he to redefine the bounds of the saturator 
|bq. ( 24 ) | at each / by 


U t minfu m;1 ^ . A/// max ^ Uj(t — At)} 
L) = ma x{n mill ,. -A tu t1KlXf -f «,(/ - Ao) 


(28) 

(29) 


where UjU A/) is the calculated control command for u t at the 
earlier update. 1 


,V - Reconfigurable Entry Flight-Control 
Designs for the X-33 

A brief description of the X-33 vehicle and its flight-control sys- 
tem has been given in the Introduction. The X-33 vehicle relies on 
engine thrust vectoring and aerosurfaces during the ascent phase 
Dur " o the entry phase, the X-33 will be controlled by aerosurfaces 
and reaction control jets. During the ascent phase, only marginal 
benefits of reconfiguration were shown because of the corrective 
forces of which the engine thrust vectoring is capable can over- 
come any failed surface position. This study presents the results 
tor the entry phase because control reconfiguration has bee shown 
to have the greatest payoff during entry. The Appendix provides 
iiT nZed dynamic model at a critical entry condition of Mach 
3. 16. This operating point will be used to demonstrate the two de- 
sign approaches introduced in the preceding sections because this 
night condition is a critical, unstable lateral-directional point Both 
the longitudinal and lateral-directional time histories will be shown 
because of coupling between axes follow ing a surface failure. 

Once the control laws were designed, thev were implemented 
m a high-fidelity nonlinear six-degree-of-freedom simulator for the 
X-33. Lnless indicated otherwise, all of the simulation results pre- 
sented in this paper were from the nonlinear simulation. 

A. Determination of Trimmable Jam Positions 
Before proceeding with the reconfigurable control design, it is 
helptul to understand whether the vehicle can still be retrimmed 


with a particular acrosurfnce jammed at a given position. Rewrite 
the posifailure aircraft model as 

v = Ax -t- B, n, -f M (3()) 

whereas before H is the jammed surface position, B, is the post failure 
B matrix, u, the remaining control surfaces, and /)., the sensitivity 
vector corresponding to the jammed surface. Let v IC „ represent the 
three body angular (roll. yaw. and pitch) rates in’ the body frame 
Suppose that y lcsl = C Ks ,.\ . Clearly 

■Vim = GcmA.i' + C B, it, -f C UM h„S (3 1 ) 

A necessary condition for retrimming the vehicle with the jammed 
surface is that the right-hand side of the preceding equation can still 
be made to vanish at .v =0 with a it r in its allowable range. To find 
the range of jammed positions of the surface S for which retrim 
is possible, we may solve the following linear programming (LP) 
problem 


min <5 (or max 8 ) <vn 

«j-.J Ur .$ ' 

subject to 

C w ^B r u r + C, es ,M = 0 (33) 

min < U r < lt rmMr $ mm < 8 < <$ max (34) 

The solution of the LP problem (32-34) gives the minimum (most 
negative) or maximum jammed incremental position of S that can 
be balanced at the trim condition by the remaining aerosurfaces u r 
within their deflection limits. This range found serves as a reason- 
able estimation of the limits within which the reconfigurable control 
system can still possibly stabilize the vehicle. In some cases includ- 

ancl l ’ ,n V|c ' 1 can 8 ive a more accurate estimate because 
the balance of forces is considered this way as well. 

Applying this technique to the X-33 model in the Appendix, we 
found that for any jammed position w ithin the phy sical limits of all 
aerosurfaces but the flaps the vehicle can always be retrimmed. For 
p jammed body flap, however, it was found that <5 mm = - 18.9 (deg) 
and <5 ma , = 10. (deg) (incremental from the trim position). This "is 
because the body flaps are the predominant aerosurfaces for pitch 
control, and other aerosurfaces cannot adequately compensate for 



Fig. 2a X-33 response from the linearized model ( ) and nonlinear simulation { 
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it if one of the (laps is jammed at a position far from their trim 
positions. When there arc commands to be tracked, the range of 
recoverable body flap jammed positions will likely be even smaller 
than the range just found because tracking of the commands requires 
additional deflections of the remaining aerosurfaces. Also, because 
the preceding analysis is based on the linearized model, the actual 
trimmable limits based on the nonlinear model can be different to 
certain extent. 

B. Servomechanism Reconfigurable Design 

Following the method in Sec. II, we can design a Pi-reconfigured 
control system for the jam of each surface. The gains of all eight such 


controllers will be stored onboard. Should the jam occur inflight, 
based on the information provided by the EM As, an appropriate 
reconfigured controller will be switched on. The three outputs to 
be commanded are 0 (roll angle), fi (sideslip angle), and a (angle 
of attack). The fi command is normally zero for coordinated flight. 
Although the linearized longitudinal and lateral directional dynam- 
ics are decoupled in the system matrix A. all of the control surfaces 
contribute to both longitudinal and lateral dynamics at different ex- 
tents, Therefore the control design is carried out simultaneously 
for both directions. In design of the feedback PI control law, the 
forward velocity is ignored because it has negligible effect on the 
response. Assume constant commands 0 CIIK j , and cr cnK |. With 



1 l i i a a 1 1 1 1 1 

0 2 4 6 8 10 12 14 16 18 20 

Time (sec) 


Fig. 2b Comparison of response from linearized model ( ) and nonlinear model ( ) for the left-side control surfaces. 
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Fig. 2c Comparison of response from linearized model ( ) and nonlinear model ( ) for right-side control surfaces. 
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(5) are Hof and " ~ iAmi Amd " cmd)r ’ the controIler dynamics 


A I = - <p. 


*'! = A, ml - p. 


“cmd — a 

(35) 


For each jammed surface the remaining seven surfaces and the eieht 
vehicle states (excluding the forward velocity) plus the three inte- 
grators states [Eqs, (35)] constitute the augmented system (8) This 
augmented system is found to be controllable. An LQR control law 
ror the augmented system, which is a PI control [aw for the X-33 in 
the form of 


U r = AT,.t + C, J (0und - <t>) d/ + k„ J ( Amd - P) dr 
+ *« J (Ofcm.1 - Of) dr 


(36) 


can be' easily designed, where r = (p r 0 <f> a q 9) T . We have 
found that for each jammed surface, except for the flaps, a single 
set of gains are adequate to handle any jammed position within 
its deflection limits. No scheduling of the gains with respect to the 
jammed position is necessary. For a jammed flap a single set of gains 
are adequate to restabilize the X-33 for jammed flap in a retrimmable 



without ^lihire? 0 " °) re5p ° nSeS USi " 8 PI - servo melhwl with left inboard 


elevon runaway then jammed at -15 deg ( ) and nominal controller 
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wifhnnt ( '°" , P arison °f responses using PF-servo method with left inboard elevon runaway then iammod ■,» i ; . 

without a failure ( ) for left-side control surfaces. J jammed at - 15 deg ( ) and nominal controller 
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position (cf., Sec. IV.B). This range cannot be increased by any gain surface saturation limits) special attention must be taken when an- 
scheduling with respect to the jammed flap position because this is alyzing control effector activity or actuator response, especially for 

the physical limit for the X-33 to be able to retrim. reconfiguration design. It is recommended that a high-fidelity non- 

Figures 2a-2c show a time history comparison of the linearized linear simulator be used to validate the linear design results. For the 

model and the nonlinear six-degree-of-freedom simulator for the remaining position of the paper, the time-history results are from 

X-33 under the same control law. The results show a good com- the nonlinear six-degree-of-freedom simulator, 

parison between the linear model and the six-degree-of-freedom Figures 3a-3c show how the servomechanism controller with 

simulation. No gain adjustments were made in this case and in the a failure works compared to the nominal case without a failure, 

following cases when applying the control law to the nonlinear simu- These figures in dashed line show the time histories of a runaway 

lator. Even though these results matched, when using a linear model left inboard elevon failure that starts at / = 0 and jams at — 15 deg. 

(linear plant and simple nonlinear actuators with rate limits and A longitudinal and lateral-directional guidance command tracking 



Time (sec) 

Fig. 3c Comparison of responses using Pi-servo method with left inboard elevon runaway then jammed at —15 deg ( ) and nominal controller 

without a failure ( ) for right-side control surfaces. 



Time (sec) 


Fig. 4a Comparison of responses using Pi-servo method with left inboard elevon runaway then jammed at -15 deg ( ) and control-allocation 

method ( ). 
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step input starts at / = I . The guidance commands are for simulta- 
neous tracking of ungle-of-attack and roll-angle commands during 
the failure because maneuvers in both axes are more demanding of 
the reconfigu ruble control system. Sideslip angle command remains 
at 0.0 deg for all test cases. Figure 3a shows the commands and the 
resulting responses. The Pl-scrvo controller tracks the commanded 
angle of attack of 8 deg and the roll angle of 10 deg adequately. 
Figure 3b shows the left surface positions, and Figure 3c shows 
the right surface positions. As can be seen in these figures, the ser- 
vomechanism controller with a failure performs almost as well as 
the nominal controller without a failure. 


This servomechanism control approach was found to work well 
for any jammed positions of any of the six aerosurfaces, excluding 
the flaps. For the jamming of one of the flaps not far from the trim 
position, the PI control system still performs well. Only when a flap 
is jammed at a position far from its trim position, the performance of 
the reconfigured PI control system begins to degrade considerably. 

C. Control-Allocation Reconfigurable Design 

A reference PI control law using all of the eight aerosurfaces of 
the healthy X-33 is designed using the servomechanism and L QR 
method to serve as the baseline control law 



Fig. 4b Comparison of responses using Pi-servo method with left inboard elevon runaway then jammed at -15 deg ( ) and control-allocation 

method ( ) for left-side control surfaces. 
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Fig. 4c Comparison of responses using Pi-servo method with left inboard elevon runaway then jammed at —15 deg f ) and control-allocation 

method ( ) for right-side control surfaces. 
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«• = *;*+*; j 

+ k’ j (of cnul - a 


(0aml “ </>)dt + A 

)df 


^ j U 


■ ft) dt 


(37) 


The reference control law should not push the vehicle too hard for 
performance. Otherwise the vehicle after failure may not be able to 
generate the control actions the reference controller calls for. This 
would be the case when the set U in Eq. ( 17) is empty, and if this 
happens too frequently, instability could occur. 

The controlled output vector r used in Sec. Ill is chosen to be 
z = { p r q fi a) T —C : x. The ft and a are added to r, in addition to 


p, r, and q. because they are part of the commanded outputs of the 
X-33. But the difference in term of the response as compared to the 
case where : = {p r q) T was found to be indiscernible. 

For each jammed surface the reference it* is always computed 
from Eq. (37) at the current state v. The (? f and Q : matrices in 
Eq. ( 1 5) are chosen to be identity matrices, and e = 0.0005 is used. 
The control commands for the remaining seven aerosurfaces are 
obtained from the fixed-point iteration (27). 

Figure 4a shows the performance comparison of the control- 
allocation approach and the servo-Pf controller for the case of a run- 
away left inboard that jams at — 1 5 degs (see Fig. 3). Figures 4b and 
4c depict the aerosurface variations for both methods. The results 



Time (sec) 


Fig. 5a Comparison of responses using PI -servo method with right body flap runaway then jammed at 10 deg ( ) and control-allocation method 



Time (sec) 

Fig. 5b Comparison of responses using Pi-servo method with right body flap runaway then jammed at 10 deg ( ) and control-allocation method 

( ) for left-side control surfaces. 
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Time (sec) 


Fig. 5c Comparison of responses using Pi-servo method with right body flap runaway then jammed at 
( ) for right-side control surfaces. 


10 deg ( ) and control-allocation method 


show that the servo-PI controller has some overshoot, whereas the 
control-allocation method was well damped with low control sur- 
face activity (Figs. 4b and 4c). 

Figure 5a show's the performance comparison of the control- 
allocation approach and the servo PI controller for a runaway right 
body flap from 20 to 10 deg. Figures 5b and 5c show the control 
surface positions for both methods. The control-allocation approach 
provided a good response in this and other similar difficult cases, 
whereas the servo-PI method did not have as good a performance. 
A tradeoff here is that the control-allocation method needs to know 
the surface and position that has failed, but the servo-PI method only 
needs to know what surface failed, not the position. 

The responses seen in Figs. 4a and 5a under the control-allocation 
reconfiguration are similar. In fact, the control-allocation approach 
is found to provide uniformly good performance for all of the fail- 
ure (jamming) cases where stabilization and command-tracking are 
possible with the remaining aerosurfaces. Especially in the challeng- 
ing situations where a body flap is jammed, the control-allocation 
approach yields nearly the same good performance for any jammed 
position of a body flap within the retrimmable range. When the 
flap jammed position is outside the retrimmable range, instabil- 
ity occurs rapidly because some of the remaining operable sur- 
faces become severely saturated w hen try ing to counter the jammed 
flap. 

V. Conclusions 

Two methods for design of reconfigurable flight-control systems 
to handle jammed control surface are presented. One is based on a 
robust servomechanism design methodology. For the failure cases 
of jammed surface, the approach leads to a MIMO PI controller. 
The other method uses a QP-based control-allocation scheme to 
redistribute the operable control surfaces to cancel the influence 
of the jammed surface and still provide desired control moments 
and forces to the aircraft. The formulation is formally analyzed to 
justify its validity, and a globally convergent, simple fixed-point al- 
gorithm is developed tor onboard implementation o£the method. 
The servo-PI controllers are simple to implement, and the position 
of the failed surface need not be know r n. But a different controller 
is needed for each possible jammed surface. The control-allocation 
method on the other hand requires no separate designs for different 
jammed surfaces, but modest online computation and adequate con- 


trol redundancy are needed. The control allocation does require the 
knowledge of the jammed position of the failed surface. Therefore 
the answer to the question of which design is more suitable depends 
on the onboard resources. 

Applications of both approaches to reconfigurable entry flight 
control of the X-33 vehicle demonstrate the potential of the tw'o 
methods. The servo-PI controller provides good performance in 
all but the most severe failure scenarios. In comparison, uniformly 
good and virtually the same performance is achieved by the control- 
allocation-based controller, regardless of which surface is jammed, 
as long as it is still possible to control the vehicle within the authority 
of the remaining surfaces. 

Although only one jammed control surface is discussed through- 
out this work, it is straightforward to extend the two methods intro- 
duced here to the cases where jam of more than one surface occurs 
if the consideration of such an event is warranted. 

Finally, we recognize that reconfigurable control design methods 
exist that can be applied to more general failure scenarios and are 
better suited to handle nonlinearity. 14 But the methods discussed in 
this paper are consistent with the current framework of how flight 
control systems are designed and appear to be very effective for 
the restricted class of failures (jammed surfaces). A reconfigurable 
flight-control system designed with these methods can be easily 
evaluated and tested in accordance with today’s well-established 
criteria and standards. This may prove to be important for the meth- 
ods to gain acceptance in practice. 

Appendix: Linearized Model of the X-33 

The following is a linearized model of the X-33 near the ter- 
minal area energy management interface in entry flight. The flight 
conditions are Mach = 3. 1 6. height = 97,167 ft, a trini = 6.23 deg, 
0mm — 0.922 deg, 0mm=Anm=O, and weight = 78,593 Ibm. Let 
u = ( < S rei <5 lej <$ rt1 5 )(1 5 rvr ,$ Kr <5| eo ) r be the control surface per- 
turbations from the trim values, where <5 fei , 8 kl are the right and 
left inboard elevons, 8 rtU the right and left body flaps, <5 nT , <5| Vr 
the right and left rudders, and 8 ko . <5, co the right and left outboard 
elevons. 

All of the control -surface deflections are in degrees. The sign 
convention is positive body flap deflection is down, positive elevon 
deflection is down, and positive rudder delection is left looking 
forward. The surface trim values are 19.98 deg for the body flaps. 
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-24.88 deg for the inboard and outboard elevons, and 9.4 deg for the 
right rudder and -9.43 deg for the left rudder. Let the perturbations 
from the trim conditions be .r = (p r 0 ^ a q 0 v) T , where 
the components are, in the order of appearance in v, roll rate, yaw 
rate, sideslip angle, roll angle, yaw angle, angle of attack, pitch rate, 
pitch angle, and forward velocity. The units are in degrees/second for 
angular rates, degrees for angles, and feet/second for velocity. The 
linearized dynamics of the X-33 at the preceding flight conditions 
are given by 

x = Ax 4* Bit ( A I ) 


= I" Alai 0 " 

0 
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Note that the A matrix is decoupled in the longitudinal and lateral 
directions, but the B matrix is not. 
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